[LINK] There goes the neighbourhood...

[Karl Auer]

On Thu, 2011-05-12 at 08:09 +1000, Kim Holburn wrote:
> This would be a great thing in a completely open network but that's
> not what we have these days.  And it might be fine in a large
> corporate network but that's not where the main use is, is it.  the
> main use of SIP would be communicating across the random internet, and
> across firewalls.

And it would be *absolutely no problem* to do so. Or at least no more of
a problem than we now deal with routinely with a multitude of other
protocols and applications. It is a mystery to me where you are coming
from, Kim. Seriously, what are you actually trying to convince us of?
I'm lost.

> Yes, a good example, and do you think ICMP REDIRECT has a place in a
> well managed network?  I remember using it once in a difficult
> migration.  All the windows machines ignored it - as they should.
> It's a thing from the past.

Out of all the good stuff that Paul wrote, you picked on that? And
missed the point again. It was an example of a protocol referring to its
own identifiers. In IPv4 it's common enough, in IPv6, it's everywhere.
NDP, for example, unlike ARP, runs over IP. Tunnelling protocols
transfer endpoint addresses around the place. Crypto protects endpoint
addresses. IPv6 CGA actually does crypto *in* the addresses!

The idea that an address should never be part of a payload is plain and
simply *wrong*. It has become conventional wisdom only due to the
tyranny of NAT, because in a NATted world, addresses in payloads are
indeed problematical. But that is NAT's fault, not the protocols' fault.

Regards, K.

 
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)                   +61-2-64957160 (h)
http://www.biplane.com.au/kauer/                   +61-428-957160 (mob)

GPG fingerprint: DA41 51B1 1481 16E1 F7E2 B2E9 3007 14ED 5736 F687
Old fingerprint: B386 7819 B227 2961 8301 C5A9 2EBC 754B CD97 0156
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://mailman.anu.edu.au/pipermail/link/attachments/20110512/fbea38e7/attachment.sig>